$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30458aaf-8bc5-3f53-9556-5078d9063a6f.roa File: 30458aaf-8bc5-3f53-9556-5078d9063a6f.roa (raw, json) Hash identifier: P98KyEDLctO9j+jGnefmrqL2sWzMPL3eWmaihwfN6aY= Subject key identifier: 22:5F:9C:AA:B8:82:34:DC:11:B6:D2:4E:29:67:70:8F:4C:52:24:60 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFD946FF8116BBB2B1BAB0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30458aaf-8bc5-3f53-9556-5078d9063a6f.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396551 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d9:46:ff:81:16:bb:b2:b1:ba:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=7a5580c3-44f9-49a4-b372-9c2d3a57d842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a0:3a:ff:5a:2c:df:b3:37:97:df:00:bc:65: f7:4c:28:54:e0:e9:d1:b0:92:f6:9e:6b:fa:12:03: aa:03:3a:b2:79:87:89:d0:d2:26:fe:7e:c2:bf:1f: 0b:84:a3:4a:50:b4:df:17:aa:18:52:55:cb:03:27: cb:e3:56:fa:4c:c9:05:1f:ce:81:ba:e1:c3:97:bd: 5c:78:8c:db:0d:a9:66:6a:27:3d:8e:43:2e:e3:21: 01:df:3b:14:8b:8b:9a:e2:d7:c6:38:f8:59:bb:a6: f9:5b:33:92:35:37:a6:14:e9:06:22:e9:a5:82:0f: 49:7c:89:a1:da:17:64:63:0b:c1:14:d4:f2:4e:4d: 4d:06:c2:f7:1a:d2:28:f3:04:3b:c7:fc:66:0e:13: c2:e8:5c:f5:19:53:03:aa:18:7b:4e:62:6d:4a:4e: 4f:6d:47:d2:aa:18:68:cf:9a:a1:42:23:9a:fc:d2: 00:4b:02:c2:7d:af:d3:a4:df:40:3d:8c:78:96:40: 69:09:ba:ce:72:94:56:2f:68:6e:d3:79:f3:48:5a: 7e:4a:c0:fc:68:1b:20:00:41:11:98:e9:fa:4a:1d: 7d:a5:e6:f5:b9:a2:3f:88:79:cb:8a:31:b4:de:0e: 9c:11:ae:7b:75:4f:e5:8f:63:54:d5:e0:90:42:c2: 84:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5F:9C:AA:B8:82:34:DC:11:B6:D2:4E:29:67:70:8F:4C:52:24:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30458aaf-8bc5-3f53-9556-5078d9063a6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:97:13:22:57:ee:b3:00:fa:67:b7:5b:0c:61:27:84:4a:3b: 29:51:39:01:df:97:71:66:90:ce:47:5c:2f:8c:14:2d:fd:c5: 02:9d:c0:34:e5:77:5c:0a:94:53:c7:51:86:f9:60:90:36:fe: 49:14:a8:86:68:83:1a:fe:69:77:6e:da:f1:55:aa:18:88:ca: 9b:e5:50:7e:b1:c9:39:ed:4f:74:ae:fa:c1:db:c6:8e:30:8f: 6f:84:7d:80:ca:f2:d3:4e:fe:5f:4f:11:23:99:e2:14:d8:91: 04:4c:48:09:18:f6:f8:4b:4f:57:de:84:cf:ad:6a:7e:f9:98: 15:48:36:85:30:d1:7c:04:e3:dc:19:89:c6:75:a5:da:1d:d9: c0:0c:13:20:5f:91:f7:fa:d1:01:12:08:23:23:97:a2:89:c3: d5:58:a1:94:9f:0a:ca:6a:b2:ce:3b:c6:ec:21:57:8f:33:f8: b6:9f:04:a9:87:2b:ba:d4:dc:3a:4d:d8:8f:1d:18:e1:57:3f: e5:4b:4a:e8:7c:5e:0d:d6:a1:0a:c6:ef:d7:f3:78:bf:bc:26: 17:8e:3c:72:9a:a5:ed:8d:fc:9c:2e:03:87:b9:c9:c8:91:cd: b8:46:ec:07:13:3f:95:e2:77:b5:86:bb:32:54:13:71:13:16: 9e:57:91:29 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9lG/4EWu7KxurAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk N2E1NTgwYzMtNDRmOS00OWE0LWIzNzItOWMyZDNhNTdkODQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKA6/1os37M3l98AvGX3TChU4OnRsJL2nmv6 EgOqAzqyeYeJ0NIm/n7Cvx8LhKNKULTfF6oYUlXLAyfL41b6TMkFH86BuuHDl71c eIzbDalmaic9jkMu4yEB3zsUi4ua4tfGOPhZu6b5WzOSNTemFOkGIumlgg9JfImh 2hdkYwvBFNTyTk1NBsL3GtIo8wQ7x/xmDhPC6Fz1GVMDqhh7TmJtSk5PbUfSqhho z5qhQiOa/NIASwLCfa/TpN9APYx4lkBpCbrOcpRWL2hu03nzSFp+SsD8aBsgAEER mOn6Sh19peb1uaI/iHnLijG03g6cEa57dU/lj2NU1eCQQsKE1wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCJfnKq4gjTcEbbSTilncI9MUiRgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzA0NThhYWYtOGJjNS0z ZjUzLTk1NTYtNTA3OGQ5MDYzYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBhlxMiV+6zAPpnt1sMYSeESjspUTkB35dxZpDOR1wvjBQt/cUCncA0 5XdcCpRTx1GG+WCQNv5JFKiGaIMa/ml3btrxVaoYiMqb5VB+sck57U90rvrB28aO MI9vhH2AyvLTTv5fTxEjmeIU2JEETEgJGPb4S09X3oTPrWp++ZgVSDaFMNF8BOPc GYnGdaXaHdnADBMgX5H3+tEBEggjI5eiicPVWKGUnwrKarLOO8bsIVePM/i2nwSp hyu61Nw6TdiPHRjhVz/lS0rofF4N1qEKxu/X83i/vCYXjjxymqXtjfycLgOHucnI kc24RuwHEz+V4ne1hrsyVBNxExaeV5Ep -----END CERTIFICATE-----Generated at Thu Mar 26 13:00:53 2026 by rpki-client